JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.136.19.62

135.136.19.62 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 69%: ?

69%

ISP	M247 LTD Frankfurt Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.136.19.62

Whois 135.136.19.62

IP Abuse Reports for 135.136.19.62:

This IP address has been reported a total of 20 times from 15 distinct sources. 135.136.19.62 was first reported on June 14th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-08-01 23:03:17 (1 hour ago)	Brute force	Brute-Force
🇪🇸 librebit	2026-07-29 10:04:43 (3 days ago)	Brute force	Brute-Force
🇩🇪 CELOS-SOC	2026-07-29 08:30:04 (3 days ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 Admins@FBN	2026-07-29 04:52:46 (3 days ago)	VPN Logon Failed: AAA user authentication Rejected user = <[email protected]>	Brute-Force Exploited Host
🇵🇱 Budyn	2026-07-28 00:20:22 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: URI: / \| UA: Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇩🇪 SCHAPPY	2026-07-27 21:39:21 (5 days ago)	Critical web app attack detected. HTTP header is restricted by policy (/accept-charset/)	Web App Attack
🇬🇧 OptimusGO	2026-07-27 18:00:33 (5 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-27 19:00:33 UTC Log evidence: 135.136.19.62 - - [27/Jul/2026:17:45:26 +0100] "GET / HTTP/1.1" 200 409 "http://assetmobile.commstack.group" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0" 135.136.19.62 - - [27/Jul/2026:17:45:27 +0100] "GET /favicon.ico HTTP/1.1" 404 118 "http://assetmobile.commstack.group" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0" 07/27/2026-19:00:32.018900 [] [1:9000060:2] AUTONOMOUS Long-term Reconnaissance [] [Classification: (null)] [Priority: 2] {TCP} 135.136.19.62:33972 -> 185.127.18.66:443 show less	Port Scan Brute-Force
🇮🇩 Burayot	2026-07-27 04:26:03 (5 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 135.136.19.62 (DE/Germany/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 135.136.19.62 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇨🇦 lakered	2026-07-27 02:26:21 (5 days ago)	Detectors: [pfsense_monitor] \| Reasons: Firewall: Prohibited Port Scan / Automated Botnet Activity	Port Scan
🇦🇺 Terrier	2026-07-26 17:00:00 (6 days ago)	Blocked for HTTP vulnerability scanning (excessive 40x)	Web App Attack
🇪🇸 pipeline.es	2026-07-26 03:12:44 (6 days ago)	Port scanning / recon \| Evidence: date=2026-07-26 time=05:12:31 devname="[redacted]" devid="[redacte ... show more Port scanning / recon \| Evidence: date=2026-07-26 time=05:12:31 devname="[redacted]" devid="[redacted]" eventtime=1785035551099277250 tz=\"+0200\" logid=\"0000000013\" type=\"traffic\" subtype=\"forward\" level=\"notice\" vd="[redacted]" srcip=135.136.19.62 srcport=56580 srcintf="[redacted]" srcintfrole=\"wan\" dstip=[redacted] dstport=443 dstintf="[redacted]" dstintfrole=\"lan\" srccountry=\"Germany\" dstcountry=\"Spain\" session \| Country: US show less	Port Scan Web App Attack
🇺🇸 Charlesiv	2026-07-25 22:00:35 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) P ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-25T21:26:41Z Ray ID: a20e3e8cce49eded UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0 show less	Bad Web Bot
🇩🇪 4server	2026-07-25 21:27:17 (1 week ago)	[SatJul2523:27:15.5121472026][security2:error][pid115445:tid115482][client135.136.19.62:0]ModSecurit ... show more [SatJul2523:27:15.5121472026][security2:error][pid115445:tid115482][client135.136.19.62:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"tourkomanis.ch\"][uri\"/favicon.ico\"][unique_id\"amUqM_ZnhAM6_H8GugNBXQAAAEE\"]\,referer:https://tourkomanis.ch show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-07-25 16:19:21 (1 week ago)	[SatJul2518:19:18.3231022026][security2:error][pid341668:tid341760][client135.136.19.62:0]ModSecurit ... show more [SatJul2518:19:18.3231022026][security2:error][pid341668:tid341760][client135.136.19.62:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"leonitraslochi.ch\"][uri\"/comments/feed/\"][unique_id\"amTiBrL8RGszvQ8psVhpMQAAAJI\"]\,referer:https://leonitraslochi.ch show less	Hacking Web App Attack
🇫🇷 Rom74	2026-07-25 15:22:56 (1 week ago)	[Sat Jul 25 17:22:50.643630 2026] [security2:error] [pid 1311341:tid 130338147784384] [client 135.13 ... show more [Sat Jul 25 17:22:50.643630 2026] [security2:error] [pid 1311341:tid 130338147784384] [client 135.136.19.62:41222] [client 135.136.19.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nextcloud.ton-espace.com"] [uri "/"] [unique_id "amTUyqp7QnyUWSrExyvZLgAAABY"], referer: https://nextcloud.ton-espace.com [Sat Jul 25 17:22:53.960024 2026] [security2:error] [pid 1311341:tid 130338130998976] [client 135.136.19.62:41238] [client 135.136.19.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949 ... show less	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.220.229.94

🇩🇪 193.148.57.33

🇷🇴 193.46.255.86

🇨🇳 182.88.225.44

🇩🇪 167.233.21.86

🇩🇪 151.243.11.230

🇮🇳 139.59.75.238

🇨🇦 138.197.161.34

🇺🇸 135.237.125.182

🇺🇸 134.33.71.70

🇨🇳 119.115.88.212

🇰🇷 115.178.75.242

🇷🇺 109.254.0.42

🇺🇸 104.131.177.146

🇸🇮 93.103.24.238

🇬🇧 90.200.101.72

🇩🇪 87.106.29.151

🇷🇴 80.94.92.234

🇫🇷 65.111.29.57

🇺🇸 47.254.41.85